StackRadar

CVE-2026-106547

High

Advisory

Published 6 Oct 2026In the index since 8 Oct 2026
Severity
High
worst across findings
CVSS
8.5
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 18,137 indexed, latest versions
Container images
33
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 32 of 18,137 indexed charts deploy, on 33 images.

Affected packageAffected versionsFixed inImages
hdf5deb1.10.0-patch1+docs-4, 1.10.4+repack-11ubuntu1, 1.10.7+repack-4ubuntu2, 1.10.8+repack1-1+3 moreno fix listed33
OSV records
DEBIAN-CVE-2026-106547UBUNTU-CVE-2026-106547

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
hdf5@1.14.6+repack-2
no fix listed

Open the chart page →

50,087
nominatimrobjuz6.4.21 of 4See more

nominatim robjuz 6.4.2

1 of the 4 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

57,071
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16e9f34d8dd276
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

15,534
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
hdf5@1.10.4+repack-11ubuntu1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
hdf5@1.10.4+repack-11ubuntu1
no fix listed

Open the chart page →

252,652
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

37,669
postgresqlbuall-charts0.1.21 of 1See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
buall/postgres-stack:18.6881a785642cb
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

4,859
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest68b19aee1c64
hdf5@1.10.8+repack1-1
no fix listed

Open the chart page →

18,681
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

25,007
opencloudcommunity-opencloud3.2.01 of 13See more

opencloud community-opencloud 3.2.0

1 of the 13 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
apache/tika:latest-fullab9cc988828c
hdf5@1.14.6+repack-2
no fix listed

Open the chart page →

10,689
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

97,333
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

84,289
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

92,017
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

93,866
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

10,166
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

100,059
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

27,881
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

35,015
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
hdf5@1.10.8+repack1-1
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

33,979
dawarichhelmforgeVerified publisher1.0.51See more

dawarich helmforge 1.0.5

1 container image this version deploys carries CVE-2026-106547.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

—
webodmhelmforgeVerified publisher1.0.12See more

webodm helmforge 1.0.1

2 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
opendronemap/nodeodm:3.6.2fcd99eb23d8d
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
webodm/webodm_webapp:3.3.0ed7b1aa0e40f
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

—
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

15,611
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

49,338
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

7,332
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
hdf5@1.10.4+repack-11ubuntu1
no fix listed

Open the chart page →

25,352
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
hdf5@1.14.6+repack-2
no fix listed

Open the chart page →

61,319
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
hdf5@1.10.8+repack1-1
no fix listed

Open the chart page →

14,529
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

14,001
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

14,001
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

9,799
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

49,338
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
hdf5@1.10.8+repack1-1
no fix listed

Open the chart page →

12,088
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry CVE-2026-106547.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

7,302

Container images carrying it

33 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
2
apache/tika:latest-fullab9cc988828c
hdf5@1.14.6+repack-2
no fix listed
1
buall/postgres-stack:18.6881a785642cb
hdf5@1.14.5+repack-3
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
hdf5@1.10.0-patch1+docs-4
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
hdf5@1.10.4+repack-11ubuntu1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
hdf5@1.10.0-patch1+docs-4
no fix listed
1
opendatacube/restcube:latest91870111837c
hdf5@1.10.0-patch1+docs-4
no fix listed
1
opendatacube/wms:latest1b90cdf68831
hdf5@1.10.0-patch1+docs-4
no fix listed
1
opendronemap/nodeodm:3.6.2fcd99eb23d8d
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
hdf5@1.14.6+repack-2
no fix listed
1
photoprism/photoprism:260728958642220223
hdf5@1.14.6+repack-2
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
hdf5@1.14.5+repack-3
no fix listed
1
signalen/backend:2.50.1826bb090bc4e4
hdf5@1.10.8+repack1-1
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg16e9f34d8dd276
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
webodm/webodm_webapp:3.3.0ed7b1aa0e40f
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
ghcr.io/caninehq/canine:latest68b19aee1c64
hdf5@1.10.8+repack1-1
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
hdf5@1.14.5+repack-3
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
hdf5@1.10.8+repack1-1
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
hdf5@1.14.5+repack-3
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
hdf5@1.10.8+repack1-1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
hdf5@1.14.5+repack-3
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
hdf5@1.10.4+repack-11ubuntu1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
hdf5@1.10.4+repack-11ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.